RE: Windows XP local Privileges

["Stephane Auger" <stephaneauger () pre2post com>]

Put the computer in its own Organisational Unit in the Active Directory.
Then, just block policy inheritance on that OU.  That way, none of the
computers inside it will get their policy modified by the server.
Depending on the version of SBS you're running, there are different ways
to block inheritance, but I can't tell you how without knowing if it's
2000 or 2003 SBS. 


Stephane Auger

-----Original Message-----
From: Rashied Sambo [mailto:Rashied () Honey-CT co za] 
Sent: December 13, 2004 2:26 AM
To: security-basics () securityfocus com
Subject: Windows XP local Privileges

Hi

Not sure if this was mentioned already,so hopefully I am not being
redundant.
My problem is this:-

We have a Small Bus. Server, App server and terminal server. I have
added a new workstation to log onto the domain. But now the XP pc's
local privileges is being dictated by the SBS domain server. Normaly I
would like this but our internet is via proxy on the SBS server and to
be able to activate windows xp via the internet I need admin rights on
the workstation. Could you guys (and gals) help me by telling what to
try to have my workstation dictate its own rights and not authenticate
its rights form the server?

Thanx

Rashied Sambo
Rashied () Honey-CT co za
IT / Admin / Marketing
HONEY ATTORNEYS
+27 21 941 7777